-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Mar 2018 22:49:53 +0100 Source: librelp Binary: librelp0 librelp-dev Architecture: source Version: 1.2.7-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Michael Biebl <biebl@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: librelp-dev - Reliable Event Logging Protocol (RELP) library - development file librelp0 - Reliable Event Logging Protocol (RELP) library Changes: librelp (1.2.7-2+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * Stack-based buffer overflow in relpTcpChkPeerName function (CVE-2018-1000140) Checksums-Sha1: 0054dd38e93f03509ac71af538fb3711a5a20be8 2126 librelp_1.2.7-2+deb8u1.dsc 060097280a8f5ff3365c3455c9f12eddaa72dc10 410896 librelp_1.2.7.orig.tar.gz b0b85e737075dfc96a88c920afeb5bbf452e0baa 5300 librelp_1.2.7-2+deb8u1.debian.tar.xz Checksums-Sha256: 9855ae004c48b31111ac2c19d0955f776b618abcd98d7ef768c1b8ca97cf6393 2126 librelp_1.2.7-2+deb8u1.dsc 3a434a1c71772706104cfb1c93ba8e6809d257851d60de29ac2142c60c68d7d1 410896 librelp_1.2.7.orig.tar.gz e3029d27fe592c72876acff65b7223f34922655122727f719fcf431ea563c8e7 5300 librelp_1.2.7-2+deb8u1.debian.tar.xz Files: ec2cede9876b3d9748bbaa99b7803682 2126 libs optional librelp_1.2.7-2+deb8u1.dsc 26e02602490af3a681a2a13e6ce29efb 410896 libs optional librelp_1.2.7.orig.tar.gz 67bcca6cfaefd9ea0052974aa89e49c0 5300 libs optional librelp_1.2.7-2+deb8u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlq3+HlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E0noP/2VbvhNOqvz+HEkq6BCSYupnLFcRxR6E 2hPRjGaaa/VC6v7Eu2GPNNdplwN6kXMVPF3F7hIr2ewVy1P3jE4unlabCmgn5rKl aA/m9mUzhCCh3v0u5nHBd+DI4QskW2Fpmi+0BXumuN38eyN6y8jmXsh2J4pfX3q8 DW59vhZ0NFOiYQT9rxatZHckr/NN/KA1sQ1bpjBQ8cq0vOoECVyMwoANPdpoGuFJ 5k8MyUb6oZoMyaB2hAJixsauc3X2oOCrhL7FhzYMbAbvgqFy+N/SdYPiqfLa+ZyP xiUjbj01hhcdvV6OOjFF5SLHJb8ru4V5ilO6PXR6gMlyFGlhmQWC8PEvw+xKL5i/ P29qhqJ8IxAsk6V6PLXGeGFNsXRC/uHBk/pPJC2YjT34MnoCJRg5vzRKusbb5e2y XV35+VFSQImpadfo97zVlOykiXBXnwjx+CtBLHOlFw/5uigEwxgW/YEMZ2UuiNAh KrZZ9T1dwhS9sk4JhoU1GtyUei4HD7UPq2401D+4sT2rJ78tW54piJwTGxYk7LA6 iaL77pf7EGfLT1PXu3ksBTPrUPgZ5pLc6x/rxrlQdQcrZQVi+s28O4Mu62LGfc1a UFWUKUf9yjTTLmX7v2uZzu7HV+P+/k7xFhAagnF5Kljs0dsYGxto/Xa9iP0bxeNT Onb+zKrspA6G =0he1 -----END PGP SIGNATURE-----